Phishing is a crime
What is phishing
Phishing is an online crime in which a perpetrator attempts to acquire sensitive information such as username, password, personal information, credit card and/or banking details by masquerading as a legitimate or trustworthy entity, or by impersonating a victim.
Phishing is also used to trick victims into downloading malware on to their devices to enable various cyberattacks, including ransomware, using links or attachments in otherwise legitimate-looking emails, text messages or direct messages on social media.
Phishing-as-a-service (PHaaS) kits make this form of cyberattack more accessible. Be aware that acquiring and using a phishing kit (or exploit kit) is a criminal act.
What the law says
Phishing is a crime, and may constitute fraud under Section 380(1) of the Criminal Code, with a maximum penalty of 14 years' imprisonment.
Further, Canada's anti-spam legislation, prohibits the sending of unsolicited commercial electronic messages. Under section 20(4) of Canada's anti-spam legislation, "any person who contravenes Canada's anti-spam legislation may be subject to a maximum administrative monetary penalty of up to $1 million in the case of an individual, and up to $10 million in the case of any other person".
It is not illegal to enter the term "phishing" or other related terms into a web browser or search engine.
Consequences of committing phishing attacks and other cybercrimes
The RCMP and its Canadian police partners take cybercrime seriously. We work with national and international partners to find and apprehend offenders, and to disrupt fraud and cybercrime threats to protect Canadians.
If you commit a cybercrime, you could face the following consequences, among others:
- having your computers seized and your Internet access restricted or monitored
- paying a penalty or fine
- going to prison for up to 14 years
- having a criminal record, which can have lifelong implications for travel, employment and other opportunities
Make the right choice
The RCMP is committed to helping people make informed choices online. Cybercrimes have a real and devastating impact on victims, and can ruin the life of individuals who choose to commit them.
There are many positive and lawful ways to use cyberskills:
Cyber security technicians and experts are in high demand in many fields, such as policing, security, science, mathematics, computing and engineering, as well as business administration, social sciences and others.
For more information on cyber careers, visit:
- Public Safety's Cyber Careers within the Government of Canada
- Cyber Centre's Cyber Security Career Guide
Reporting fraud or cybercrime
Check if your email address has been exposed in a data breach: Have I Been Pwned.
If you have been the victim of fraud or cybercrime or have witnessed a fraud or cybercrime, please report it to local police and the Canadian Anti-Fraud Centre.
Related links
- Fact sheet: Phishing - Get Cyber Safe
- Canadian Anti-Fraud Centre
- National Cybercrime Coordination Centre
- Date modified: